Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
File:                     f43ca66a-a36b-341e-bc5d-391204812929.roa (raw, json)
Hash identifier:          lGDx1+i4n0GEQPh9gK4KTURmeDmMSqtAFneu8m2morU=
Subject key identifier:   E6:2F:F7:CC:B8:45:B5:A5:2E:83:C4:38:DB:D7:94:8C:3B:E9:11:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A411541A7E38C0A0971C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        24.7.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:41:15:41:a7:e3:8c:0a:09:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=1c3b17aa-f139-4ae6-b40d-49422d5ab65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:6c:7e:23:1e:4e:54:5f:7c:38:7f:95:88:
                    c6:85:df:29:2d:4d:fb:66:53:47:f7:4f:44:2e:19:
                    80:e1:7c:8a:af:84:16:9b:75:f6:69:ae:2c:a8:13:
                    f9:1f:1f:25:89:f2:fc:3f:8c:5e:d1:f0:fb:61:bd:
                    05:10:73:6a:2c:9c:fa:76:0a:a9:09:d1:dd:98:d6:
                    a2:ac:69:9a:cf:90:0c:2a:0b:8e:d4:01:36:bd:8d:
                    db:d0:6f:da:94:38:d4:07:6c:c5:c1:8a:d6:84:31:
                    67:83:1b:07:8f:0c:96:db:4a:8c:25:07:36:0b:12:
                    b6:c8:1f:55:c5:9b:15:e2:fd:15:ba:36:e6:70:95:
                    87:a8:39:d4:25:fe:de:99:9f:23:f1:ca:4f:ea:3c:
                    68:c0:27:ad:ab:8b:1e:86:c8:d0:25:af:2c:4d:70:
                    f2:e5:6f:cf:6e:b7:ea:29:94:b9:bc:49:1f:8a:1f:
                    cc:69:8d:c3:11:ed:29:1b:f8:94:aa:c9:b7:c7:ed:
                    85:82:59:ee:18:a6:e4:29:6f:aa:68:3f:e1:a0:79:
                    50:b3:ad:f7:22:26:58:d4:02:cd:5c:d8:1a:7c:52:
                    55:8e:56:ce:af:3a:28:12:41:aa:4f:6d:99:97:66:
                    0b:7f:15:b0:4b:53:d9:84:9e:57:ae:6f:1f:6e:6e:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2F:F7:CC:B8:45:B5:A5:2E:83:C4:38:DB:D7:94:8C:3B:E9:11:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:31:f4:58:c2:50:e6:20:da:8d:86:d1:ac:d8:8a:b3:c7:7c:
         1c:e9:11:a6:c9:6c:8e:67:82:d2:13:62:2f:e6:ca:3c:ed:2d:
         d6:88:7e:46:38:f5:be:bb:04:6b:0d:11:41:97:fa:5d:58:79:
         7c:94:78:31:b0:1d:42:8e:28:a1:4f:32:1f:d8:89:24:ee:84:
         40:f8:31:3e:f3:f3:98:05:57:39:5d:1e:e4:1f:1a:a0:d4:a5:
         e3:e8:98:3f:29:25:3e:e3:20:db:64:64:d9:f2:43:2d:53:49:
         51:41:8f:71:c7:dc:47:84:ef:f6:62:e5:34:9a:d0:a5:dc:46:
         4b:d4:96:32:b1:6c:a5:41:00:d4:56:3e:16:f2:01:26:cb:6a:
         7f:a9:1d:c9:30:d1:6a:c2:bc:25:db:a4:75:f8:62:32:b0:a0:
         a3:15:0f:33:73:fd:b0:9e:ef:69:f0:dd:e6:a7:85:cb:80:6b:
         53:c6:16:66:b7:df:6c:71:03:67:a9:43:eb:b2:e9:dd:e2:7b:
         fe:53:07:fa:68:6c:d8:84:cc:93:f1:15:f2:92:1d:3f:23:ae:
         62:e8:12:6b:79:3c:32:ac:1c:60:ac:de:09:cf:57:46:a0:f4:
         ad:25:9e:3b:31:07:9d:18:10:51:6d:04:5e:de:c2:8c:00:1b:
         74:ec:c8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:29:53 2024 by rpki-client on console-ams.rpki-client.org